CVEvulnerability
CVE-2014-3161
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2014-07-20
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
The WebMediaPlayerAndroid::load function in content/renderer/media/android/webmediaplayer_android.cc in Google Chrome before 36.0.1985.122 on Android does not properly interact with redirects, which allows remote attackers to bypass the Same Origin Policy via a crafted web site that hosts a video stream.
Affected configurations
• google chrome (<= 36.0.1985.106)
• google chrome 36.0.1985.1
• google chrome 36.0.1985.2
• google chrome 36.0.1985.3
• google chrome 36.0.1985.4
• google chrome 36.0.1985.5
• google chrome 36.0.1985.6
• google chrome 36.0.1985.8
• google chrome 36.0.1985.12
• google chrome 36.0.1985.13
• google chrome 36.0.1985.14
• google chrome 36.0.1985.15
• google chrome 36.0.1985.16
• google chrome 36.0.1985.17
• google chrome 36.0.1985.18
• google chrome 36.0.1985.19
• google chrome 36.0.1985.20
• google chrome 36.0.1985.21
• google chrome 36.0.1985.22
• google chrome 36.0.1985.23
• google chrome 36.0.1985.24
• google chrome 36.0.1985.25
• google chrome 36.0.1985.26
• google chrome 36.0.1985.27
• google chrome 36.0.1985.28
• google chrome 36.0.1985.29
• google chrome 36.0.1985.30
• google chrome 36.0.1985.31
• google chrome 36.0.1985.32
• google chrome 36.0.1985.33
• google chrome 36.0.1985.34
• google chrome 36.0.1985.35
• google chrome 36.0.1985.36
• google chrome 36.0.1985.37
• google chrome 36.0.1985.38
• google chrome 36.0.1985.39
• google chrome 36.0.1985.40
• google chrome 36.0.1985.41
• google chrome 36.0.1985.42
• google chrome 36.0.1985.43
• google chrome 36.0.1985.44
• google chrome 36.0.1985.45
• google chrome 36.0.1985.46
• google chrome 36.0.1985.47
• google chrome 36.0.1985.48
• google chrome 36.0.1985.49
• google chrome 36.0.1985.50
• google chrome 36.0.1985.51
• google chrome 36.0.1985.52
• google chrome 36.0.1985.53
• google chrome 36.0.1985.54
• google chrome 36.0.1985.55
• google chrome 36.0.1985.56
• google chrome 36.0.1985.57
• google chrome 36.0.1985.58
• google chrome 36.0.1985.59
• google chrome 36.0.1985.60
• google chrome 36.0.1985.61
• google chrome 36.0.1985.62
• google chrome 36.0.1985.63
… and 40 more
Related
Weakness · not in database (1)
References
- http://googlechromereleases.blogspot.com/2014/07/chrome-for-android-update.html googlechromereleases.blogspot.com
- https://code.google.com/p/chromium/issues/detail?id=334204 code.google.com
- https://src.chromium.org/viewvc/chrome?revision=266396&view=revision src.chromium.org
- http://googlechromereleases.blogspot.com/2014/07/chrome-for-android-update.html googlechromereleases.blogspot.com
- https://code.google.com/p/chromium/issues/detail?id=334204 code.google.com
- https://src.chromium.org/viewvc/chrome?revision=266396&view=revision src.chromium.org